create-component
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process external inputs to scaffold code, which represents a standard indirect prompt injection surface.
- Ingestion points: The skill processes feature requests, designs, and static markup provided by the user (SKILL.md).
- Boundary markers: The instructions do not define delimiters or specific 'ignore' directives to isolate user-provided data from system instructions.
- Capability inventory: The skill is used to scaffold components and routes, involving file-writing capabilities across the project's source directory.
- Sanitization: No specific protocols are mentioned for sanitizing or escaping the data derived from external requests before its inclusion in the generated Astro markup.
Audit Metadata